ROOTKey September 2026 Update: Restore Center, IP Access Control, and Data Classification

Vaults, tables, files, and individual file versions that are deleted now move into a Restore Center rather than disappearing. You can browse everything currently recoverable, filter by resource type, and restore items individually or several at once with multi-select.

Each recoverable item shows a countdown to permanent deletion, so there is no ambiguity about how long you have. Deleted items are also visible in context from the Vaults, Files, and Tables pages, and the type filter is deep-linkable, which means you can send a colleague a link straight to the deleted tables view rather than describing where to click.

Restoring a file brings its version history back with it, including versions nested several levels deep in a promotion chain.

Organisations can now define access rules based on network origin and have the platform enforce them, not just report on them. Rules are scoped in two tiers - a category and then a specific target - so you can apply a rule broadly across a resource class or narrowly to one vault.

A traffic view shows attempts against your rules, marked simply as allowed or blocked, so you can see the effect of a rule before and after you enable it. Rules can be toggled individually without waiting on the rest of the list.

This is the control most often requested by organisations with a data residency obligation, and it pairs directly with the classification work below.

Vaults and files now carry a data classification level. New files inherit the classification of the vault they land in, so the label follows the data without anyone having to remember to apply it.

Classification is not decorative. Access rules can now be enforced by classification level, so a vault marked at a higher sensitivity behaves differently from one marked lower. Vaults at the most restricted level require a fresh multi-factor step-up before access, and organisations can define a country allowlist that applies specifically to sensitive and restricted vaults.

Classification also appears as a real field in vault-level and organisation-level compliance reports, which means the sensitivity of the data is now part of the evidence you hand to an auditor rather than something you assert separately. Changes to a vault's classification are recorded in the audit trail and cascade to the files inside it.